I am not a mathematician, but I was wondering if the proposed proof of the abc conjecture (PDF) by Shinichi Mochizuki of Kyoto University would contain insights and mathematical tools that would lead to a weakening of elliptic curve cryptography.

A short update: I was actually wrong, and Mochizuki's approach can be made effective in fairly explicit ways. Whether it is correct is another issue, and I wouldn't be able to tell. Anyway, the following answer in MathOverflow discusses the effective bounds: mathoverflow.net/questions/106560/…
–
Andres CaicedoSep 27 '12 at 20:21

1 Answer
1

I'm not a crypto specialist, or even a number-theorist, so you should take this answer with a grain of salt: I don't see how a proof of ABC could possibly effect elliptic curve cryptography in practice.

First, the applications of elliptic curves to cryptography which I am aware of use curves over finite fields; ABC is a conjecture about curves over number fields.

Secondly, my main point: It is hard to imagine the proof of any long believed conjecture effecting cryptography in practice, because cryptographers routinely analyze their methods under the assumption that major number theoretic conjectures are true. If we proved ABC, or Birch--Swinnerton-Dyer, or the Generalized Riemann Hypothesis, we might become more confident that cryptographic protocols have the strengths they are claimed to have, but it wouldn't change our beliefs about the strengths of the protocols because they have already been analyzed under the belief that those conjectures hold.

In fact, I suspect that if one of these conjectures were false, it probably also wouldn't alter cryptographic practice much. I am less confident of this claim, but I think the experimental evidence for these conjectures is strong enough that any counterexample would probably be out of the range of curves used in cryptographic practice. I could definitely be wrong here. (To further clarify what I am thinking here, I don't mean that we have literally checked every curve in the relevant range. I mean it is my vague intuition that we have checked enough curves that it seems likely that, even if there were some counterexample, they would be very rare and thus easily avoided by choosing a random curve.)

Of course, it is possible that Mochizuki's claimed proof might introduce methods which lead to dramatically improved algorithms for computing (for example) elliptic curve discrete logarithms. Since very few people have understood his methods yet (and I am not one of them), it seems too soon to comment on this.